FHN 
WhatsApp users in India may need to change how they use the messaging app as the government moves to strengthen mobile number security. New SIM-binding requirements are expected to take effect on January 1, 2027, with messaging platforms reportedly required to comply by December 31, 2026.
The changes could affect people who use WhatsApp on tablets, secondary phones, or other devices without the SIM card associated with their registered number.
The policy aims to make it harder for criminals to misuse Indian mobile numbers after removing or deactivating the original SIM card. However, the impact on everyday users will depend on how each messaging platform implements the requirements.
What Is the New SIM-Binding Rule?
The Department of Telecommunications (DoT) introduced directions under India’s Telecom Cyber Security Rules, 2024, requiring covered messaging services to maintain a link between an account and its registered mobile number.
Under SIM binding, the messaging service must verify that the active SIM associated with the registered number remains connected as required by the rules. This goes beyond the one-time SMS verification code commonly used when setting up an account.
The government has identified several services covered by its directions, including WhatsApp, Telegram, Signal, Snapchat, Arattai, ShareChat, Josh, and JioChat.
The policy addresses a security gap that can arise when messaging accounts continue working even after their original SIM cards have been removed or deactivated.
According to the government, criminals can exploit this gap to operate accounts remotely and misuse Indian mobile numbers for phishing, investment scams, and fraudulent calls. The government cited cyber-fraud losses exceeding ₹22,800 crore in 2024.
How Could the Changes Affect WhatsApp Users?
People who regularly move between devices or use WhatsApp without keeping their registered SIM in the same phone may need to pay closer attention to the new requirements.
Potential effects include:
- Secondary phones and tablets: Users may need to keep the registered SIM active and connected in the appropriate device.
- Linked devices: The way companion devices connect and maintain sessions may change, depending on WhatsApp’s implementation.
- Travel and SIM changes: Removing, replacing, or deactivating a registered SIM could affect account access in certain circumstances.
- Web sessions: WhatsApp Web and other linked sessions may be subject to additional security checks.
Earlier versions of the government directions included a requirement for web sessions to log out at least every six hours. Subsequent reporting has indicated that this blanket requirement has been replaced by risk-based logouts.
Therefore, users should not assume that every linked device will automatically stop working on January 1, 2027. The actual impact will depend on the final implementation and the user’s setup.
The government has also indicated that roaming is not affected when the registered SIM remains in the handset.
What Can Users Do to Protect Their Accounts?
SIM binding is intended to reduce certain forms of mobile number misuse, but it cannot prevent every account takeover or online scam.
WhatsApp users can take a few simple precautions:
- Keep the registered SIM active: Avoid deactivating or discarding the number linked to the account without first understanding the consequences.
- Review linked devices: Open WhatsApp’s Linked Devices section and remove any sessions you do not recognize.
- Protect account verification codes: Never share SMS verification codes or two-step verification PINs with anyone.
- Check linking requests carefully: Do not approve unexpected device-linking requests, even if they appear to come from a trusted contact.
- Follow official updates: Check announcements from WhatsApp and India’s Department of Telecommunications for confirmed implementation details.
Scams involving malicious device-linking requests demonstrate why SIM security alone is not enough. Attackers may still trick users into authorizing access to their accounts.
Conclusion
India’s proposed SIM-binding requirements represent a change in how messaging platforms manage account security. The aim is to make it harder to misuse registered mobile numbers for fraud, while potentially changing how some users access WhatsApp across multiple devices.
Users should review their account settings and follow official announcements before making changes to their devices or SIM cards.
About the Author
